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Top Stories 

• The U.S. Government ordered Volkswagen to recall about 482,000 diesel Jetta, Beetle, 
Golf, and Passat vehicles September 18 after an investigation found the company installed 
software to conceal vehicle nitrogen oxide emissions. - New York Times (See item 3 ) 

• The Federal Aviation Administration fined the city of Cleveland September 1 8 after 
investigations into Hopkins International Airport revealed a series of incidents in which the 
airport failed to clear runways and taxiways of snow and ice. - CNN (See item 9 ) 

• Seven cars of a Burlington Northern Santa Fe Railroad train derailed in Scotland, South 
Dakota, burst into flames, and collapsed a bridge after ethanol spilled from their cargo 
September 19. - Grand Forks Herald (See item 10 ) 

• Crews reached 70 percent containment of the 75,781-acre Valley Fire and 74-percent 
containment of the 70,760-acre Butte fire in California September 21. - San Francisco Bay 
City News (See item 18 ) 
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Energy Sector 



1. September 21, KNSD 39 San Diego - (California) Thousands lost power across San 
Diego. The California Independent Systems Operator ordered San Diego Gas & 
Electric to cut power to 1 15,000 customers for approximately 2 hours September 20 by 
dropping 150 megawatts of load in the utility’s service territory due to an issue at the 
Otay Power Plant. Several businesses were forced to close as a result of the outage. 
Source: http://www.nbcsandiego.com/news/local/Thousands-Without-Power-Across- 
San-Diego-328431481.html 

2. September 18, WWL 4 New Orleans - (National) Long-delayed report blames rig 
crew for 2013 gas well blowout. A report published by the Bureau of Safety and 
Environmental Enforcement, released the week of September 7, blames the drilling 
rig’s crew for not using the proper fluid to control natural gas at the Hercules Offshore- 
owned Walter Oil & Gas well off the central Louisiana coast, and for not reacting in a 
timely manner when the blowout began in July 2013. The report also attributes the 
accident to human error after an investigation determined that workers should have 
recognized a “kick” of natural gas in the well previously, which would have likely 
prevented the accident if the blowout preventer was activated at the appropriate time. 
Source: http://www.wwltv.com/story/news/local/investigations/david- 
hammer/201 5/09/1 8/long-delaved-report-blames-rig-crew-for-2013-gas-well- 

blo wout/7 2430042/ 



For another story, see item 7 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

3. September 18, New York Times - (National) Volkswagen told to recall nearly 500,000 
vehicles. The U.S. government ordered Volkswagen to recall about 482,000 diesel 
model year 2009 - 2015 Jetta, Beetle, Golf, and Passat vehicles September 18 after the 
U.S. Environmental Protection Agency issued a notice of violation and alleged the 
company installed “defeat device” software to evade clean air standards and conceal 
nitrogen oxide emissions. 

Source: http://www.cnbc.com/2015/09/18/volkswagen-ordered-to-recall-nearly- 
500000-vehicles.html 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



4. September 21, Reuters - (National) First Eagle to pay nearly $40 min in SEC case 
over distribution fees. First Eagle Investment Management and its affiliated 
distributor FEF Distributors agreed to pay $25 million to shareholders and $12.5 
million in penalties to resolve U.S. Securities and Exchange Commission allegations 
that the investment firm improperly used mutual fund assets to pay for marketing and 
distribution fees without permissions from the fund’s board. 

Source: http://www.reuters.com/article/2015/Q9/21/sec-firsteagle- 
idUSLlNllR19Q20150921 

5. September 19, WFOR 4 Miami - (Florida) “Filter Bandit” robs plantation bank on 
back-to-back days. Authorities are searching for a suspect dubbed the “Filter Bandit” 
who struck a Plantation Chase bank September 18 and 19, and may be linked to 9 other 
robberies in Plantation, Coral Springs, and Tamarac since August 2014. 

Source: http://miami.cbslocal.com/2015/09/19/fbi-filter-bandit-robs-plantation-bank- 
on-back-to-back-days/ 

Transportation Systems Sector 

6. September 21, NBC News - (New York) Colgate University freshmen die in New 
York plane crash. Two Colgate University freshmen died in a plane crash in Madison 
County, New York, September 20 after the plane came down shortly after taking off 
from Hamilton Municipal Airport. 

Source: http://www.nbcnews.com/news/us-news/freshmen-students-die-plane-crash- 
n430761 

7. September 21, WRC 4 Washington, D.C. - (Washington, D.C.) Stadium Armory 
Metro Station closed due to smoke at power substation in RFK lot. The 
Washington D.C. Metro Transit Police reported that the Stadium Armory Metro station 
was closed September 21 and that Metrorail service is temporarily suspended between 
Eastern Market and Minnesota Avenue on the Orange Fine while crews shut off the 
traction power substation in the Robert F. Kennedy Memorial Stadium parking lot due 
to smoke. 

Source: http://www.nbcwashington.com/news/local/Stadium-Arrnorv-Station-Closed- 
Due-to-Smoke-at-Power-Substation-in-RFK-Fot-32848685 1 .html 

8. September 20, WBOY Clarksburg 12 - (West Virginia) Interstate 79 reopens after 
multiple tractor trailer accident. All lanes of Interstate 79 near mile marker 145 in 
Monongalia County reopened September 20 after being shut down for several hours 
while crews cleaned up the scene of an accident that involved multiple semi-trucks. 
There were no reports of injuries. 

Source: http://www.wbov.eom/storv/30071247/interstate-79-shut-down-from- vehicle- 
accident 

9. September 19, CNN - (Ohio) FAA fines Cleveland for airport’s snow, ice troubles. 
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The Federal Aviation Administration fined the city of Cleveland September 18 after 
multiple investigations starting in 2013 into Hopkins International Airport revealed a 
series of incidents in which the airport failed to adequately clear its runways and 
taxiways of snow and ice. Incidents included taxiing issues due to ice that resulted in 
canceled landing clearances and an airport safety vehicle inadvertently sliding onto an 
inactive runway, among other findings. 

Source: http://www.cnn.com/2015/09/18/us/cleveland-winter-weather-fine/index.html 

10. September 19, Grand Forks Herald - (South Dakota) Ethanol train derails, catches 
fire in South Dakota. Seven cars of a Burlington Northern Santa Fe Railroad train 
derailed in Scotland, South Dakota, burst into flames, and collapsed a bridge after an 
unknown amount of ethanol spilled from their cargo September 19. Crews responded to 
the derailment, began rebuilding the bridge, and were working to reopen the rail line. 
Source: http://www.grandforksherald.com/news/region/3843037-ethanol-train-derails- 
catches-fire-south-dakota 



11. September 19, New Orleans Times -Picayune - (Louisiana) Interstate 10 east reopens 
in Slidell, ending 8-hour shut down after chase and ‘gun fight’. Interstate 10 
eastbound in Slidell reopened September 19 after being shut down for at least 8 hours 
during a car chase that officials reported as a “gun fight” that ended with a man being 
shot and killed. No officers were injured during the incident. 

Source: 

http://www.nola.com/traffic/index.ssf/2015/09/interstate 10 east reopens in.html 

Food and Agriculture Sector 

12. September 19, WWBT 12 Richmond - (National) Tastee Caramel Apple recalled for 
failing to list peanuts on label. Giant Food Stores and Martin’s Food Markets issued a 
voluntary recall September 19 of 3-ounce packages of Tastee Caramel Apple products 
due to misbranding and undeclared peanuts. Customers were advised to discard any 
unused portions. 

Source: http://www.nbcl2.com/story/30069165/tastee-caramel-apple-recalled-for- 
failing-to-list-peanuts-on-label 

13. September 18, Arizona Republic - (Arizona) Pima County death tied to tainted 
cucumbers. The Pima County Health Department announced September 1 8 that a 
woman with underlying health conditions was the third death tied to a 31-State 
Salmonella outbreak linked to tainted cucumbers grown in Mexico. The U.S. Centers 
for Disease Control and Prevention reported that 418 people were infected by the 
outbreak and that the California-based distributor was evaluating its cucumber-farming 
and-packing operations. 

Source: http://www.azcentral.com/storv/news/local/arizona/breaking/2015/09/18/pima- 
county-death-tied-tainted-cucumbers/7243 1 166/ 



Water and Wastewater Systems Sector 

14. September 21, KNBC 4 Los Angeles - (California) Costal waters remain closed in 
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Long Beach after sewage spill. Beach closures remained in effect in Long Beach 
September 21 after a San Gabriel swage line broke and spilled approximately 250,000 
gallons of sewage into the storm system September 15. Officials hope to reopen 
beaches September 22. 

Source: http://www.nbclosangeles.com/news/local/Coastal-Waters-Remain-Close-in- 
Long-Beach-After-Sewage-Spill-32849967 1 .html 

15. September 18, Hawaii News Now - (Hawaii) 3K gallons of raw sewage overflow 
from Waikiki manhole. The Wai ki ki City Department of Environmental Services 
responded after a sanitary sewer overflow grease clogged a 6-inch pipe and spilled 
3,000 gallons of raw sewage out of a man hole September 18. Crews were able to 
recover 250 gallons with the remaining 2,750 gallons dissipating in a storm drain. None 
of the spill reportedly reached receiving water. 

Source: http://www.hawaiinewsnow.com/story/30067342/3k-gallons-of-raw-sewage- 
overflow-from-waikiki-manhole 



Healthcare and Public Health Sector 

16. September 19, Softpedia - (National) Software firm’s blunder exposes 1.5M private 
user details on AWS server. Sy sterna Software, a company that provides solutions for 
managing small insurance and medical claims, confirmed that a Texas-based individual 
managed to download data from its server, and that the individual will meet with the 
Texas attorney general to properly wipe the data, which potentially contains an 
unknown amount of details on several insurance claims companies and their clients. 
Source: http://news.softpedia.com/news/software-firm-s-blunder-exposes-l-5rn- 
private-user-details-on-aws-server-492165.shtml 

17. September 17, WTAE 4 Pittsburgh - (Pennsylvania) UPMC: 2 patients who died 
stayed in ICU where mold was found. The University of Pittsburgh Medical Center 
announced September 17 that two heart transplants patients, who died after contracting 
fungal infections, had stayed in the same room where mold was found located in the 
hospital’s cardiothoracic intensive care unit (ICU). An investigation is ongoing after 
the discovery of the mold prompted the hospital to close down its cardiothoracic ICU 
indefinitely for cleaning and analysis. 

Source: http://www.wtae.com/news/mold-found-at-upmc-presbyterian/35268570 

Government Facilities Sector 

18. September 21, San Francisco Bay City News - (California) Massive Valley Fire is at 
75,711 acres and 70 percent containment. Crews reached 70 percent containment 
September 21 of the 75,781-acre Valley Fire burning in Napa, Sonoma, and Lake 
counties, which has killed 3 people and destroyed at least 888 structures. Fire crews 
also continued to battle the 70,760-acre Butte Fire in Amador and Calaveras counties, 
reaching 74-percent containment. 

Source: http://www.nbcbayarea.com/news/local/Massive-Vallev-Fire-is-at-7510Q- 
Acres-and-53-Percent-Containment-328418221.html 
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19. September 21, Berkshire Eagle - (Massachusetts) MCLA residence hall evacuated 
after hazmat concern. The Berkshire Towers residence hall at the Massachusetts 
College of Liberal Arts in North Adams was evacuated September 19 while authorities 
investigated the source of an unknown odor that sickened 27 students and caused them 
to be transported to area hospitals for treatment. Officials are continuing to monitor air 
quality and investigate the source of the odor. 

Source: http://www.berkshireeagle.com/local/ci 28846756/mcla-residence-hall- 
evacuated-after-hazmat-concern 

20. September 20, Associated Press - (New Mexico) Military plane crashes in New 
Mexico desert, officials say. Authorities reported that a military aircraft crashed in a 
desert near the Las Cruces International Airport in New Mexico during a training flight 
September 19, injuring at least one of the two occupants who ejected before the crash. 
The site was ordered to be secured while officials investigated the incident. 

Source: http://www.foxnews.com/us/2015/09/20/military-plane-crashes-in-new- 
mexico-desert-official-says/ 

21. September 18, WTAE 4 Pittsburgh - (Pennsylvania) Albert Gallatin North Middle 
School evacuated after students fall ill, taken to hospital. Albert Gallatin North 
Middle School in German Township was evacuated after 10 students and 2 teachers 
were transported to an area hospital September 18 with symptoms of nausea, dizziness, 
and respiratory issues. Officials were unable to determine the source of the illnesses 
after all tests came back negative. 

Source: http://www.wtae.com/news/middle-school-evacuated-due-to-a-unknown- 
sickness-outbreak-seven-taken-to-the-hospital/3535 1130 

For another story, see item 16 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

22. September 20, Softpedia - (International) Three Symantec employees fired for 
issuing fake Google SSL certificates. Symantec fired three employees for issuing 
rogue Secure Sockets Layer (SSL) certificates after Google engineers working for the 
Certificate Transparency project discovered that the company had issued fake 
Google.com certificates with “extended validation” labels. 

Source: http://news.softpedia.com/news/three-svmantec-emplovees-fired-for-issuing- 
fake-google-com-ssl-certificates-492190.shtml 

23. September 20, IDG News Service - (International) Apple removes malware-infected 
iOS apps from store. Apple officials reported that the company had taken down about 
40 iOS applications that were affected by a new form of malware called XcodeGhost, 
which modifies the Xcode integrated development environment and collects 
information on devices. 
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Source: http://www.computerworld.com/article/2985018/apple-ios/apple-removes- 
malware-infected-ios-apps-from-store.html#tk.rss security 

24. September 19, Softpedia - (International) Ghost Push Android malware infects 
600,000 new users per day. Security researchers from Cheetah Mobile discovered that 
a new type of boot-persistent Android malware called Ghost Push is being packaged 
with 39 applications distributed through unofficial channels. The malware has infected 
14,847 phone types and models across 3,658 brands worldwide. 

Source: http://news.softpedia.com/news/ghost-push-android-malware-infects-600-000- 
new-users-per-day-492 1 67 . shtml 

25. September 18, Softpedia - (International) Infographic: Over 170,000 Magento shops 
are still vulnerable to Shoplift bug. Security researchers from Byte reported that 
173,547 Magento stores are still vulnerable to the Shoplift vulnerability discovered in 
February, which resulted in stolen customer data and diverted payments. 

Source: http://news.softpedia.com/news/over-170-000-magento-shops-are-still- 
vulnerable-to-the-shoplift-bug-492136.shtml 

26. September 18, Softpedia - (International) Thousands of WordPress sites hijacked to 
distribute malware in the last two days. Security researchers from Sucuri discovered 
a new malware campaign affecting thousands of WordPress Web sites, called 
VisitorTracker, in which hackers are hijacking sites and adding malicious JavaScript 
code that uses iframe calls to direct users to a site hosting the Nuclear Exploit Kit (EK). 
Source: http://news.softpedia.com/news/thousands-of-wordpress-hijacked-to-distribute- 
malware-in-the-last-two-days-492117.shtml 

27. September 18, Threatpost - (International) Google details plans to disable SSLV3 
RC4. Google officials announced the company’s formal intent to move away from the 
Rivest Cipher 4 (RC4) and Secure Sockets Layer version 3 (SSLv3) protocols due to 
security concerns, and laid out future standards for Transport Layer Security (TLS) 
clients. 

Source: https://threatpost.com/google-details-plans-to-disable-sslv3-and-rc4/114732/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

28. September 19, Softpedia - (National) AT&T employees installed malware on their 
PCs to aid phone unlocking service. AT&T filed a law suit against three former call 
center employees for allegedly installing malware on their servers with the purpose of 
aiding a phone unlocking service, Swift Unlocks, in obtaining AT&T Torch unlock 
codes, after AT&T reportedly noticed a high number of generated unlock codes 
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missing and alerted Torch’s administrators. 

Source: http://news.softpedia.com/news/at-t-employees-installed-malware-on-their-pcs- 
to-aid-phone-unlocking-service-492 1 45 . shtml 

Commercial Facilities Sector 

29. September 21, WCAU 10 Philadelphia - (Pennsylvania) 1 dead, 3 hurt in shooting 
inside Philly tavern possibly connected to biker gang. A suspected gang shooting 
inside Tangeray Tavern in Philadelphia killed 1 man and injured 3 others after 
witnesses reported that at least 15 bikers fled the scene following the shooting. 
Authorities are continuing to investigate the incident. 

Source: http://www.nbcphiladelphia.com/news/local/Tavem-Philadelphia-Shooting- 
Bikers-Fatal-328438681.html 

30. September 21, Lexington Herald-Leader - { Kentucky) Car crashes into building, 
driver runs; former restaurant, apartments condemned. A North Limestone 
building housing several apartments and the former Lexington Pasta Company was 
condemned and deemed unsafe after a car crashed into the building September 21, 
prompting crews to shut down the gas and electrical supply to the building. Police are 
searching for the driver of the vehicle, who fled the scene. 

Source: http://www.kentucky.com/2015/09/21/4048854 apartments-evacuated-after- 
car.html 

31. September 19, KABC 7 Los Angeles - (California) Crews work to fix water-main 
break in Sherman Oaks. The Los Angeles Department of Water and Power reported 
September 19 that a water main break in Sherman Oaks damaged 1 business and 
impacted 24 others after an 8-inch pipe ruptured, causing crews to shut off water 
services until September 20 for repairs. 

Source: http://abc7.com/news/water-main-break-impacts-25-businesses-in-sherman- 
oaks/992715/ 



For additional stories, see items 1 and 16 

Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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